When the Droid DNA was first announced, we were all surprised to find that the bootloader was unlockable at HTCdev.com. Because of this, the device actually got root, recovery, and custom kernel days before the official release. Unfortunately, by the time the device became available in retail channels, Verizon pulled the plug and it was no longer unlocked through official means.

Thankfully, there's another way (isn't there always?). The softmod below will effectively change the carrier information, allowing it to once again be unlocked via HTC's official tool.

Before we get started, special thanks to Sean Beaupre, who stepped in at the last minute and made this release possible. I was unable to release one of the original exploits due to a conflict of interest, and Sean provided a working replacement that we could release.

Unzip DNA_TeamAndIRC.zip. Put runme.sh, CIDGen.apk, and backup.ab in the directory with adb.

Check the README.txt before continuing!

adb install CIDGen.apk

Run the CIDGen app from your phone and follow the directions on the app. Then ensure the /sdcard/CIDBLOCK.img file exists on your phone with the following command:

adb shell ls -l /sdcard/CIDBLOCK.img

If CIDBLOCK.img does not exist after running the app, do NOT proceed. Try re-running CIDGen.apk on your phone again, then re-run the above command to verify CIDBLOCK.img's existence.

If it does exist, continue with these commands:

adb push runme.sh /data/local/tmp/

adb shell chmod 755 /data/local/tmp/runme.sh

adb shell /data/local/tmp/runme.sh

This process will loop forever and give out lots of "No such file" or "link failed" errors, so just leave it running for now.

In a second terminal/command prompt use adb to restore the modified backup. After running this command the phone will ask for your permission to restore the file, so go ahead and allow it.

adb restore backup.ab

After the restore is finished you will need to stop the runme.sh script in the first terminal (use control+c or just close the window).

From this point forward, you're past the point of no return. Do not continue if you will not be able to follow the instructions 100%, as rebooting or powering down the phone at the wrong time will brick the device. Ensure your phone has at least 50% battery life remaining before continuing.

adb shell rm /data/data/com.htc.usage/files/exploit/*

adb shell mv /data/DxDrm /data/DxDrm_org

adb shell mkdir /data/DxDrm

adb shell ln -s /dev/block/mmcblk0p5 /data/DxDrm/DxSecureDB

adb reboot

adb wait-for-device

Now repeat the first exploit:

adb shell /data/local/tmp/runme.sh

This process will also loop forever and give out lots of "No such file" or "link failed" errors - again, just leave it running.

In a second terminal/command prompt use adb to restore the modified backup. After running this command the phone will ask for your permission to restore the file - just like before, go ahead and allow it.

adb restore backup.ab

After the restore is done you will need to stop the runme.sh script in the first terminal (use control+c or just close the window).

adb shell mv /data/DxDrm /data/DxDrm_trash

adb shell dd if=/sdcard/CIDBLOCK.img of=/dev/block/mmcblk0p5

adb reboot

You can now unlock using HTCDev.com - simply select "All other supported models" for your phone type. Finally, for recovery and root following unlock please visit the HTC Droid DNA forums on RootzWiki. The support thread for the unlock can be found here.

If you would like to further support developments of roots and unlocks, donations for test devices, (& brick replacements) can be made to here.

Saw the answer in the comments.
So does this mean that warranty is completely voided?

http://twitter.com/MBHays Mike

It's technically voided, but if it's hardware faults then HTC will likely repair the phone.

Champlification

adb shell mkdir /data/DxDrm results in permission denied?

http://twitter.com/TeamAndIRC Justin Case

Then the restore update didnt finish, some windows users are having issues with the adb server being killed, Working on it now, not sure if its a bug in windows, or a bug in the windows version of adb.

James

what if i run through linux? any issue with this?

http://www.facebook.com/TheSystemsEngineer Edwin Castillo

I kept getting adb server is out of date. killing... until I realized that I was running "HTC Sync Manager". Once I killed it, I never saw the out of date or permission denied message.

http://profiles.google.com/tomthebomb67212 tom courtney

noob question, what benefit does this provide over a locked bootloader?

SetiroN

The possibility to run unsigned ROMs and kernels, i.e. get rid of the sense plague and get on with cyanogenmod.

Dominic

Justin, had errors both times with adb restore backup.ab. First time, permission denied and then the second time it didn't ACK. What gives?

The Steven Park

I can't turn on my phone and no fastboot. its connected as qhsusb dload to my laptop. what should I do or real question is what can I do. Please help me. just got this phone yesterday. my email add [email protected]

Its great you guys got this far, but HTC verizon will never release ril like on the thunderbolt to full cm10 or a full Google phone, will see.

sgtguthrie

No non nexus device ever gets ril released. The Thunderbolt was just special, a bitch, and a stepchild. You won't have that problem on this device ;-)

http://twitter.com/TeamAndIRC Justin Case

Why would HTC do that? No OEMs have that as a policy.

Chris G

Soo, call me a noob, an idiot, because i am an idiot that is for sure. But if by chance, I unplugged and turned off my phone prior to doing that last and final step (The three-line script) having bricked my phone. I am just out of luck, right?

docgreg

This worked perfectly. Thanks so much!

Jason Ivins

Thanks Jcase!

deh2002

Sweet, just got my DNA today, my first phone on Verizon. Of course I'm keeping a line open on att also in case some future greatness comes their way

Onyx Black

Hey Jcase i was a mid trying your bootloader exploit for the htc droid dna when i ran into this right after the restore part. any tips ?

Well great... I made it to "Now repeat the first exploit" and ran the "adb restore backup.ab" confirmed data restore on the phn and walked away and my computer decided to reboot to install updates. Now the device will not power on. Any suggestions?

Pinchloaf

When the "No such file" is running and I run "adb restore backup.ab" and I hit restore on the phone the"No such file" stop running and the restore doesn't seem to do anything. Ideas?

jason

I was hoping this worked with the HTC J Butterfly? I get error "Incompatible device! Exciting!" When launching CIDGen.